irchaos.club https://irchaos.club Latest posts from irchaos.club Mon, 16 Mar 2026 22:46:09 GMT Analyzing the Midnight Blizzard Eviction Plan https://irchaos.club/analyzing-the-midnight-blizzard-eviction-plan https://irchaos.club/analyzing-the-midnight-blizzard-eviction-plan Wed, 25 Feb 2026 00:00:00 GMT cauliflowerdoughnuts incident responsecloudazure Browser Hijacking: Three Technique Studies https://www.gdatasoftware.com/blog/2025/11/38298-learning-about-browser-hijacking https://www.gdatasoftware.com/blog/2025/11/38298-learning-about-browser-hijacking Wed, 10 Dec 2025 00:00:00 GMT GData, Karsten Hahn reverse engineeringmalware Analyzing the unsafe chroot behavior of sudo CVE-2025-32463 https://skyblue.team/posts/unsafe-chroot/ https://skyblue.team/posts/unsafe-chroot/ Mon, 03 Nov 2025 00:00:00 GMT airbus-cert, dolphino kevebpfsudothreat hunting Graph Api Overwhelm https://www.alphaf0x.com/posts/graph-api/ https://www.alphaf0x.com/posts/graph-api/ Sun, 02 Nov 2025 00:00:00 GMT alphaf0x graphapimicrosoftcloud Darkgate 3: Return of the Temp https://irchaos.club/darkgate-3-return-of-the-temp https://irchaos.club/darkgate-3-return-of-the-temp Tue, 21 Oct 2025 00:00:00 GMT grepStrength remmalware analysisdarkgateloaderautoit Digging into Windows Defender Detection History (WDDH) https://www.orangecyberdefense.com/global/blog/cybersecurity/digging-into-windows-defender-detection-history-wddh https://www.orangecyberdefense.com/global/blog/cybersecurity/digging-into-windows-defender-detection-history-wddh Sat, 18 Oct 2025 00:00:00 GMT cyberdefense windowsforensicstools Dameware Remote Everywhere Log Reference https://blog.dingusxmcgee.com/blog/2025/10/13/Dameware-Remote-Everywhere-Log-Reference.html https://blog.dingusxmcgee.com/blog/2025/10/13/Dameware-Remote-Everywhere-Log-Reference.html Mon, 13 Oct 2025 00:00:00 GMT dingusxmcgee incident responsermmdameware Desired State Configurations https://mashtitle.com/2025/10/13/desired-state-configurations/ https://mashtitle.com/2025/10/13/desired-state-configurations/ Mon, 13 Oct 2025 00:00:00 GMT smashtitle powershellinfrastructure Opened a Can of XWorms https://grepstrength.dev/opened-a-can-of-xworms-33fde9d2aee6 https://grepstrength.dev/opened-a-can-of-xworms-33fde9d2aee6 Mon, 29 Sep 2025 09:05:43 GMT grepstrength remmalware analysisxwormratbackdoorpersistenceprocess injection Scavenger Malware Distributed via num2words PyPI Supply Chain Compromise https://invokere.com/posts/2025/07/scavenger-malware-distributed-via-num2words-pypi-supply-chain-compromise/ https://invokere.com/posts/2025/07/scavenger-malware-distributed-via-num2words-pypi-supply-chain-compromise/ Mon, 28 Jul 2025 00:00:00 GMT invokere threat huntingreverse engineeringscavengerpypi Install Linters, Get Malware - DevSecOps Speedrun Edition https://irchaos.club/install-linters-get-malware https://irchaos.club/install-linters-get-malware Sun, 20 Jul 2025 00:00:00 GMT humpty/tony, invokere reverse engineeringsupply chainnpmc++ Supper is served https://irchaos.club/supper-is-served https://irchaos.club/supper-is-served Sun, 29 Jun 2025 00:00:00 GMT humpty/tony threat huntingreverse engineeringcscavenger Incident Response Checklist https://mashtitle.com/2025/06/01/incident-response-checklist/ https://mashtitle.com/2025/06/01/incident-response-checklist/ Sun, 01 Jun 2025 00:00:00 GMT smashtitle helpersincident response Analyzing the RedTiger Malware Stealer https://irchaos.club/redtiger-malware https://irchaos.club/redtiger-malware Sun, 16 Mar 2025 00:00:00 GMT humpty/tony threat huntingreverse engineeringpython Dissecting a fresh BlankGrabber sample https://irchaos.club/dissecting-blankgrabber https://irchaos.club/dissecting-blankgrabber Sat, 15 Feb 2025 00:00:00 GMT humpty/tony reverse engineeringpython Threat hunting for shits and giggles https://irchaos.club/threat-hunting-for-giggles https://irchaos.club/threat-hunting-for-giggles Thu, 28 Nov 2024 00:00:00 GMT humpty/tony threat huntingreverse engineeringdotnet Automating Qakbot Malware Analysis with Binary Ninja https://invokere.com/posts/2024/02/automating-qakbot-malware-analysis-with-binary-ninja/ https://invokere.com/posts/2024/02/automating-qakbot-malware-analysis-with-binary-ninja/ Wed, 21 Feb 2024 00:00:00 GMT invokere reverse engineeringcqakbot